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^ | Abstract 

We present necessary and sufficient conditions for a Boolean function to be a negabent function for both even 
and odd number of variables, which demonstrate the relationship between negabent functions and bent functions. 
By using these necessary and sufficient conditions for Boolean functions to be negabent, we obtain that the nega 
(T) ■ spectrum of a negabent function has at most 4 values. We determine the nega spectrum distribution of negabent 

functions. Further, we provide a method to construct bent-negabent functions in n variables (n even) of algebraic 
degree ranging from 2 to 5, which implies that the maximum algebraic degree of an n-variable bent-negabent 
^ , function is equal to J. Thus, we answer two open problems proposed by Parker and Pott and by Stanica et al. 

respectively. 
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5 ' I. Introduction 



Boolean functions play an important role in cryptography and error-correcting codes. They should satisfy several 
properties, which are quite often impossible to be satisfied simultaneously. One of the most important requirements 
for Boolean functions is the nonlinearity, which means that the function is as far away from all affine functions as 
possible. In 1976, Rothaus introduced the class of bent functions which have the maximum nonlinearity (TJ. These 
functions exist only on even number of variables and an n-variable bent function can have degree at most §. 

A Boolean function is bent if and only if its spectrum with respect to the Walsh-Hadamard transform is flat 
(i.e. all spectral values have the same absolute value). Parker and Riera extended the concept of a bent function 
to some generalized bent criteria for a Boolean function in ||2), 0> where they required that a Boolean function 
has flat spectrum with respect to one or more transforms from a specified set of unitary transforms. The set of 
transforms they chose is not arbitrary but is motivated by a choice of local unitary transforms that are central to the 
structural analysis of pure re-qubit stabilizer quantum states. The transforms they applied are ?i-fold tensor products 
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, and the nega-Hadamard matrix 



several H's, and the nega-Hadamard transform is constructed from the tensor product of several N's. As in the case 
of the Walsh-Hadamard transform, a Boolean function is called negabent if the spectrum under the nega-Hadamard 
transform is flat. 

There are some papers in the area of negabent functions in the last few years |4]-[|8]]. An interesting topic is to 
construct Boolean functions which are both bent and negabent (bent-negabent), whose relates results are listed as 



1) In (U, Parker and Pott gave necessary and sufficient conditions for quadratic functions to be bent-negabent. It 
turns out that such quadratic bent-negabent functions exist for all even n. They also described all Maiorana- 
McFarland type bent functions which are simultaneously negabent. It seems difficult to apply this result in 
order to construct Maiorana-McFarland bent-negabent functions. For even number of variables, necessary and 
sufficient condition for a Boolean function to be a negabent function has also been presented. In 0), they 
proposed the following open problem (open problem 3 in |@]). 

Open Problem 1: Find the maximum degree of bent-negabent functions. 

2) In @, transformations that leave the bent-negabent property invariant are presented. A construction for 
infinitely many bent-negabent Boolean functions in 2mn variables (m ^ 1 mod 3) and of algebraic degree 
at most n is described, this being a subclass of the Maiorana-McFarland bent class. Moreover, the algebraic 
degrees of n-variable bent-negabent functions in this construction are less than or equal to f and n = mod 4. 
Finally it is shown that a bent-negabent function in n (n even) variables from the Maiorona-McFarland class 
has algebraic degree at most § — 1, but not an existence result. 

3) In (6], Stanica et al. developed some properties of nega-Hadamard transforms. Consequently, they derived 
several results on negabentness of concatenations, and partially-symmetric functions. They also obtained a 
characterization of bent-negabent functions in a subclass of Maiorana-McFarland set. 

4) In |7], Stanica et al. pointed out that the algebraic degree of an n-variable negabent function is at most 

Further, a characterization of bent-negabent functions was obtained within a subclass of the Maiorana- 
McFarland set. They developed a technique to construct bent-negabent Boolean functions by using complete 
mapping polynomials. Using this technique they demonstrated that for each I > 2 there exist bent-negabent 
functions on n = 121 variables with algebraic degree j + 1 = I + 1. It is also demonstrated that there 
exist bent-negabent functions on 8 variables with algebraic degrees 2, 3 or 4. Moreover, they presented the 
following open problem. 

Open Problem 2: For any n = mod 4, give a general construction of bent-negabent Boolean functions on 
n variables with algebraic degree strictly greater than § + 1. 

5) In (H, Sarkar considered negabent Boolean functions defined over finite fields. He characterized negabent 
quadratic monomial functions. He also presented necessary and sufficient condition for a Maiorana-McFarland 
bent function to be a negabent function. As a consequence of that result he can obtain bent-negabent Maiorana- 
McFarland function of degree j over ¥2^. 

In this paper, we concentrate on negabent functions and bent-negabent functions. In particular, we have the 
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following contributions. 

• In Section III, direct links between the nega-Hadamard trnsform and the Walsh-Hadamard transform are 
explored. By using this property, we study necessary and sufficient conditions for a Boolean function to 
be negabent for both even and odd number of variables, which demonstrate the relationship between negabent 
functions and bent functions. 

• In Section IV, we obtain that the nega spectrum of a negabent function has at most 4 values. Hereafter, we 
determine the nega spectrum distribution of negabent functions. 

• In Section V, we give a method to construct bent-negabent functions in n variables (n even) of degree ranging 
from 2 to §. These functions belong to the Maiorana-McFarland complete class. Thus, we can obtain that the 
maximum algebraic degree of an n-variable bent-negabent function is equal to ^. Therefore, we answer the 
Open Problems 1 and 2 proposed in 0] and respectively. 

II. Preliminaries 

Let n be a positive integer, Fg be the n-dimensional vector space over the two element field F2. The set of 
integers, real numbers and complex numbers are denoted by Z, R and C, respectively. To avoid confusion, we 
denote the addition over Z, R and C by +, and the addition over FJj by © for all n > 1. 

Let B n be the set of all maps from F?j to F2. Such a map is called an n-variable Boolean function. Let f(x) G B n , 
the support of f(x) is defined as supp(f) = {x G F£ | f(x) = 1}. The Hamming weight wt(/) of f(x) is the 
size of supp(f), i.e., wt(/) = \supp(f)\. The Hamming weight of a binary vector x = (xi,x%, ■ ■ ■ ,x n ) G F£ is 
defined by wt(x) = Yli=i Xi ~ Each n-variable Boolean function f(x) has a unique representation by a multivariate 
polynomial over F2, called the algebraic normal form (ANF): 

n 

f(x 1 ,---,X n )= fuH^T, /nGF 2 . 

u=(ui,u 2 ,---,u n )€_¥2 i=l 

The algebraic degree, deg(/), of / is defined as max{wt(n)|/ u /0,u£ FJ?}. 
The Walsh-Hadamard transform of f(x) G B n at any vector u G F2 is defined by 

Here u ■ x is a usual inner product of vectors, i.e., u • x = u-^xi © ^2^2 ® • • • © u n x n for u = (u\, U2, ■ ■ ■ , u n ) and 
x = (x\,X2, ■ ■ ■ ,x n ) G F'2. The Walsh spectrum of / consists of all values {Wf(u) \ u G F'J?}. 

A function / G B n is said to be bent if |W/(u)| = 1 for all u G Ff. It is semibent if |W/(it)| G {0,±\/2}. 
Boolean bent (resp. semibent) functions exist only if the number of variables, n, is even (resp. odd). If / G B n is 
bent, then the dual function f of /, defined on F?> by: 

W f (u) = (-1)K U \ V n G F2, 

is also bent and its own dual is / itself. 
The autocorrelation of / at u is defined as 

C f (u) = ^ (_l)/W©/(-©«). 
For even n, it is known that a function / G B n is bent if and only if Cf(u) = for all ti / (0, 0, • • • , 0) G FJ;. 
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The nega-Hadamard transform of f(x) G B n at u G F?j is the complex valued function: 

JV/(«) = 2~t Yl (-iy^ +u - x i wt( > x \ 

The spectrum of / consists of all values {Nf(u) | it G FJ,'}. 

A function is said to be negabent if \Nf(u)\ = 1 for all u G F^. Note that all the affine functions (both even 
and odd numbers of variables) are negabent [4]. For even number of variables, if a negabent function is also a bent 
function, then we call this function bent-negabent. 

Define the nega-autocorrelation of / at u G F?j by 

c f (u)= 

In O, it was shown that a Boolean function is negabent if and only if all its nontrivial nega-autocorrelation values 
are which is analogous to the result concerning the autocorrelation values of a bent function. 

We conclude this section by introducing the following notations which will be used throughout this paper. 

1) n = (0, 0, • • • , 0) and l n = (1, 1, • • • , 1) G F£; 

2) ej : ej G Fg denotes the vector of Hamming weight 1 with 1 on the j-th component; 

3) z : if z = (zi, ■ ■ ■ , z n ) G F^, then z = z ® l n denotes the bitwise complement of z; 

4) \z\ : if z = a + bi G C is a complex number, then \z\ = \/a 2 + b 2 denotes the absolute value of z; 

5) (7d{x) '■ if x G F?j, then <Jd{x) denotes the elementary symmetric Boolean function on n variables with degree 
d (1 < d < n), i.e., 

°d{x)= (J) x^x^- ■ ■ x id , V x = (xi, • • • ,x n ) G Fg. 

l<ii <"-<id<n 

In particular, if x = (x\, ■ ■ ■ , x n ) G F£, then cri(a;) = xi ffi • • • © x n = l n • x and o- 2 (x) = 0i<j<j< n XiXj; 

6) GL(n, ¥2) : the group of all invertible n x n matrices over F2. 

III. Connections between negabent functions and bent functions 

In this section, direct links between the nega-Hadamard transform and the Walsh-Hadamard transform are 
explored. By using this property, we study necessary and sufficient conditions for a Boolean function to be negabent 
for both even and odd number of variables, which demonstrate the relationship between negabent functions and 
bent functions. 

Lemma 1: Let / G B n . Between the nega-Hadamard transform and the Walsh-Hadamard transform there is the 
relation 

AT i \ W f(B(T2 (u) + W f(ScT2 (u) . W fea2 (u) -W f(Ba2 (u) 
MfW = + % . 

Proof: First for any x = (x\,X2, • • • , x n ) G FJJ, it can be easily proved by induction that 

n 

wt(x) (mod 4) = + 2 ^ x^xj = cri(x) + 2cr 2 (x) = l n • x + 2<7 2 (x). 

i=l l<*<iS:'^ 

Thus, the nega-Hadamard transform of / at u G Fj is 

Nf(u) = 2~ 2 ^_iy{ x )+ u - x ^i x ) — 2^? ^ ^_^f{x)+(T 2 (x)+u-x^l n -x _ 
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Applying the formula i a = 1+ ^ 2 ^ + i • 1 ^ 1 - > for a G F2, we get 



N f (u) = 2-t + ( l) 1 "'^ . ^ ( l) 1 ""^ 

W/e*. (u) + W/e<r 2 (« © In) ^ /e(72 (u) - W f(S(72 (u © 1 



2 2 

W f(B a 2 (u) + W f(B(T2 (u) WfmJy) - W/ea 2 Q») 
2 % ' 2 

□ 

This property is an important tool to analyse the properties of negabent functions. If n is even, necessary and 
sufficient conditions for a Boolean function / G B n to be negabent has been given in |4). By using Lemma Q] 
and the Jacobi's two-square theorem, we can obtain the necessary and sufficient conditions for a Boolean function 
/ G B n to be negabent for both even and odd n. For completeness, we also provide the proofs for even n here. 

Fact 1: (Jacobi's two-square theorem) Let A: be a nonnegative integer. 

(1) The Diophantine equation x 2 + y 2 = 2 2k+1 has a unique nonnegative integer solution as (x,y) = (2 k ,2 k ). 

(2) The Diophantine equation x 2 + y 2 = 2 2k has exactly two nonnegative integer solutions as (x,y) = (2 fc ,0) 
and (x,y) = (0,2 k ). 

Theorem 1: (JH) Let n be even and f(x) G B n . Then f(x) is negabent if and only if f(x) © o"2(x) is bent. 
Proof: A Boolean function / G B n is negabent if and only if \Nf(u)\ = 1 for all u G F 2 \ By LemmaQ] we have 

|Ar/(u)|2= (^(n)) 2 + (^ 2 (^) 2 =li VuGF „ 

hence, 

(2f W f(B(72 (u)) 2 + (2W /eff2 (n)) 2 = 2"+\ V u G FJ. 

From Jacobi's two-square theorem we know that 2 n+1 has a unique representation as a sum of two squares, namely 
2 n+1 = (2t) 2 + (2?) 2 if n is even. Thus, it is equivalent to 

|2W /eCT2 ( n )| = \2%W fm2 (u)\ =2?, V u G F£, 

i.e., 

1^/0^(^1 = 1^.(^)1 = 1, VnGF^. 
This completes the proof. □ 
By Theorem [T] the following corollary is obvious. 

Corollary 1: (H) If / is a bent-negabent function, then / © 02 is also bent-negabent. 

If n is odd, we can get a similar equivalent condition as for even n. In the following, we give three equivalent 
conditions of a Boolean function to be negabent for an odd number of variables. The latter two conditions show 
the relationship between n-variable negabent functions and (n — Invariable (or (n + Invariable) bent functions. 

Theorem 2: Let n be odd and f(x) G B n . Then the following statements are equivalent: 

(1) f(x) is negabent; 

(2) f(x) © a 2 (x) is semibent and \W fecT2 (u)\ / \Wf® a2 (u)\ for all u G F£; 
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(3) (/©cr 2 )(zi, • • • ,x n - 1 ,x 1 ®x 2 © • • • © x n ) = (l®x n )g(xi, ■ ■ • ,x n -i) ®x n h(xi, ■ ■ • ,x n _i), where g and h 
are both bent functions with (n — 1) variables; 

(4) f(x) © <7 2 (x) © a\{x)y is bent in n + 1 variables, where x G FJ? and y G F 2 . 

Proof: (1) 44> (2): A Boolean function / <E B n is negabent if and only if \Nf(u)\ = 1 for all u G F^. It follows 
from Lemma [TJ that 



2 _ (W /eCT2 (n)) 2 + (^ /ffiCT2 (u)) 2 



l, VueF^ ; 



hence, 

(2"iW f(5a2 (u)) 2 + (2W /ea2 (n)) 2 = 2"+\ Vm£ FJ. 
By Jacobi's two-square theorem, it is equivalent to 

{\W fea2 (u)\,\W f(S(T2 (u)\} = {0, V2}, V^G F' 2 \ 

According to the definition of semibent, we can obtain (1) is equivalent to (2). 

(1) O (3): Let h{x) = f{x)®a 2 (x), f 2 (x) = (/fficx 2 )(xi, • • • , x n _ 1; x x ffix 2 ffl • 
of f 2 (x) is f 2 (x) = (1 © x n )g{x u ■ ■ • ,x n _i) © x n h(x 1 , ■ ■ • ,x n _i) for some g, h G B n -i. Then, for any v 
(vi, ■ ■ ■ ,v n -i,v n ) G F%, we have 

x'SFJ -1 , x„e¥ 2 

_ 2~t ^_2~)9(^')ffi«'- ;c ' _|_ (_x) ,, "(_i) h ( a: ')ffi' u '- a; '] 



)x n ), and the decomposition 



— [2~V ^ (-i)^')®"'^' + (-l) 1 '"2" I V L ^ (_yh(x')®v'-x'- 



1 

72 



(1) 



where x' = (x\, ■ ■ ■ , x n _i) and t/ = (v\, • ■ ■ , v n -i) G Fg . Let A be an n x n matrix over F 2 of the form 

/I 1 \ 

1 1 



A 



V 



1 1 

1 / 



where "empty" entries are 0. Then A 1 = A and / 2 (x) = /i(xA). Therefore, for any v G F^, we can get that 

W f2 (v) = 2~» Yl (-l) fl{xA) ® v ' x = 2~? V (_!)/! (s/)©^(yA) T 

= 2"? V (-l)^^)®( vAT )-2/ 

•yGFj 



= W fl (vA T ), 

where the superscript T represents the transpose of a matrix. 



(2) 
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For any u = (u\, • • • , u n -\, u n ) G F^, denote u; = uA T = (iox, • • • , w n _i, w; n ) G F^. By equality (0, we have 

= WjM^r 1 ) = W f2 (uA T ) = W f2 (w), 
since (A T ) _1 = A T . Combined with equality CD), we get 

W)» = W)» = ^=[W ff K) + (-lr-WfcCn/)], (3) 



and 

W h (u) = W h ({u © l n )A T ) = W h (uK T © e n ) = W h (w © e n ) = - (-l) w "W h (w% (4) 

where it/ = (w\, ■ ■ ■ ,w n -i) G Fg -1 . It follows from Lemma [T] equalities © and (0]) that 

^ = W f(B(T2 (u) + W f(B(T2 (u) | . W /eg2 (u)- W /@ga (M) 

W /t (u) + W fl (u) | . W h (u) - W fl (u) 

= ^ 2 + ,-(-ir«. 2 ( 5 ) 

Since the matrix A is invertible, we have that w = uA T = (w',w n ) runs over F?j if u runs all over F^. 

Boolean function / G B n is negabent if and only if \Nf(u)\ = 1 for all u G F^. It follows from equality (f5]) that 

\2^W g {w')\ 2 + \2^W h {w')\ 2 = 2 n , for all w' G F™" 1 . 

By Jacobis two-square theorem, it is equivalent to 

\W g {w')\ = \W h {w')\ = 1, for all w' G F™"\ 

which means that g and h are both bent functions with (n — 1) variables. Therefore, (1) is equivalent to (3). 

(2) 44> (4): Let f'(x,y) = f(x) © a 2 (x) © a±(x)y = f{x)®o 2 (x) © {l n -x)y G B n+1 . Then the Walsh-Hadamard 
transform of f'(x,y) at (u,v) G F'2 +1 , tiSFj and v G F 2 , is 

ieFj,?/eF 2 

_ 2~' 2 T i ^ (_l)/( a ')+ "2(2:)+«-a; _|_ |'_^^2 _Ii T i ^_^/(a;)+o-2(a:)+ln-a;+M-a 
xSFj xSFj 

= -L[ W/ffi(T2 ( u ) + (-l)^ /ffi(T2 (Tl)]. 
Then, /' is bent if and only if 

Wf. (u, 0) = [W/© CT2 (u) + ^ /0(72 («)] = ±1, for all u G F£, 

and 

W> (u, 1) = [Vr /eCT2 (it) - W/©, 2 («)] = ±1, for all tt G FJ. 

That is, \W fea2 (u)\ / |W/ ffiCT2 («)| and W/ ffiCT2 (u) G {0, ±\/2} for all u G i.e., f(x) © cr 2 (x) is semibent. □ 

Theorems [T] and [2] demonstrate that negabent functions and bent functions are closely related. Theorem [2] also 
shows that n-variable negabent functions must be semibent if n is odd. 
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IV. Nega spectrum of negabent functions 

In this section, by using these necessary and sufficient conditions for Boolean functions to be negabent, we 
discuss the nega spectrum distribution of negabent functions. 

Lemma 2: Let / G B n be negabent, the values in the nega spectrum of / are of the form: 

(1) if n is even, then Nf(u) G {±1, 

(2) if n is odd, then N f (u) G {±±i, =ffi, =^}. 

Proof: (1) If n is even and / G B n is negabent, then it follows from Theorem [Qthat / <r 2 is bent. Thus, 
Wfi Scr2 (u) = ±1 for all u G F 2 . By Lemma [H we have 

W fm2 (u), if W f(Ba2 (u) = W f 
. i-W f@ffa (u), if W f(Ba2 (u) / W f(Ba2 (u), 

for all u G F™. Therefore, JV/(u) G {±1, ±*}. 

(2) If n is odd and / G B n is negabent, then it follows from Theorem [2] that f(x) ® <J2(x) is semibent and 
{\W f(B a 2 (u)\, \WfQ a2 (u)\} = {0, ^2} for all u G F™. By Lemma [Q we have 



JV)(«) 



^•W> fflffa («) + ^-W> e<ra (tt), 



□ 



thus TV^vl 6= |i±^ — - 1 ~n 
inus, i\f(u) t t^i ^, ^ , ^ /• 

Lemma |2] shows that the nega spectrum of negabent function has at most 4 values. This leads to a natural question 
of determining the nega spectrum distribution of negabent functions. 

Theorem 3: Let n be even integer and / G B n be negabent, then the nega spectrum distribution of / is 



1, 2 n ^ 2 + 2 



£-1 



in-2 



>3-l 



2 n-2 
2 n-2 



times, 
times, 
times, 
times, 



or < 



1, 2 
1, 2 

i, 



n-2 _ 2 f-l 


times, 


»-2 + 2l - 1 


times, 


2 n " 2 


times, 


2 n " 2 


times. 



Proof: If n is an even integer and / G B n is negabent, then by Theorem [T] we have / © <r 2 is bent. It is well 
known that the dual of the bent function / © cr 2 , / © cr 2 > is also bent. By Lemma [T] we can get that 



JV>(«) 



"T * 



2 2 

(_l)/©^) ) if /©o- 2 («) = /©a 2 ( u ), 

i .(_i)/e<r a («) j if /e<7 2 («)^ /©**(«), 



(6) 



for all it G F 2 . 

For < i,j < 1, denote 



|{u 6 F£|/ © (7 2 (u) = i, /©<7 2 (u)=j}|. 



(7) 



Recall that C~(a) = ^ ugF „(-l)/©^(u)©/©a 2 («©a) = for a / n since / ffi^ 2 is bent, in particular 



.-J_\/ffi<7 2 (u)ffi/ffi<7 3 (u) _ Q ) 
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which implies 



5*0,0 + <5i,i 
5o,i + 5i n 



in— 1 



(8) 
(9) 



Clearly S lfi = \{u G W$\f ® a 2 (u) = 1, /©^(u) = 0}| = \{u G F£|/©<t 2 (E) = 1, / © <r 2 (u) = 0}| = S ,i. 
Immediately, it follows from equality (© that 5q,i = S^o = 2 n_2 . By equality ©, 



\{u G F^A^u) = i}| = \{u G F^A^u) = -i}\ 



->n-2 



(10) 



Since / © a 2 is bent, we have wt(/ © a 2 ) = 2 n ~ 1 ± 2? 1 . It is obvious that wt(/ © cr 2 ) = 5i j0 + 5i,i 
2 n ~ 2 + 5 X i. Thus by equality ©, 



in-2 



+ 2 = 



or 



5*0,0 
5i,i 



2 ™-2 _ 27- 1 , 
2 n " 2 + 2f _1 . 



!5o,o — ' 
S ltl = 2 n ~ 2 - V. 

Combining equalities ©, (O, (ITOb . and (fTTI ). we get the desired result. 

Theorem 4: Let n be odd integer and / G £>„, be negabent, then the nega spectrum distribution of / is 



(11) 

□ 



^f, 2 n ~ 2 + T 

l—i r\n—2 _i_ q- 
72 > + 

-l+j 2 n ~ 2 — 2 2 



times. 

times, 
times, 
times, 



or < 



V 2 ' ^ 
l—i on— 2 

-l+j 2 n_2 



v 72 
-l-i 
V2 



m-2 



n — 1 

- 2— 


-i 


times, 


71-1 

- 2— 


-i 


times, 


+ 2^ 


-i 


times, 


+ 2^ 


-i 


times. 



Proof: If n is odd and / G B n is negabent, then by Theorem |2] we have 

(/ © C2)(zi, • • • ,X n -l,Xl © x 2 © • • • © x n ) = (1 © x n )g(xi, • • • ,x n _i) © x n h{x\, 
where both g and h are bent functions with (n — 1) variables. By equality ©, we have 



iV a = \{u G F5|^/(«) = o}| = \{(w',w n ) G F^ 1 x F 2 |^M 

v2 



+ i • 



W h (w') 
V2 



i 3<n— 1 ; 



o}|, 



(12) 



whereaG{I±f, ^, =3f, =^}. 

Because g is a bent function of (n — 1) variables, we have \{w' G F2 1 \W g (w') = 1}\ = 2 n 2 ± 2"s If 



I {11/ G F^-^WgK) = 1}| = 2 n " 2 + 2^-\ then |{«/ G F^W^u/) 
w' G -jV G F^W^u/) = 1}, we can get that 



yn-2 



n — 1 *| 

2 a \ For any 



w fl K) 

V2 



l+i-W h (w') 



if u> r 



V2 



Since W h (w') = ±1 for all w' G F™ _1 , we have 



V2 



Ni 



l-i-W h (w') jf w -I 



2 n ~ 2 + 2V- 1 . 



Because of G F£ _1 |W ff (u/ 



-1}| = 2 n ~ 2 - 2V-- 1 , we can also get that 

N-i- 



V2 



2 n-2_ 2 2 j ± -l. 
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Combining with equality (fT2t . we can conclude that the nega spectrum of / in this case is 



l+i 


2 n- 


- 2 + 2^ 


-1 


1-i 


2 n- 


"2 + 2^ 


-1 


-l+i 
V2 ' 


2 n- 


"2-2^ 


-1 


-1-i 
V2 ' 


2 n- 


-2-2^ 


-1 



times, 
times, 
times, 
times. 



Similarly, if \{w' G W%- l \W g (w') = 1}| = 2 n ~ 2 _ 2^~ 1 and |{iw' G ¥^ 1 \W g {w') = -1}| 
we can get the nega spectrum of / as follows 



yn-2 



+ 2— 



1-i 
-l+i 



V2 ' 
-1-i 
V2 ' 



n- 


-2_ 2 ^ 


-1 


times 


n- 


-2-2^ 


-1 


times 


n- 


-2 + 2^ 


-1 


times 


n- 


"2 + 2^ 


-1 


times 



This completes the proof. 



□ 



V. Construction of Bent-negabent fuctions with maximum algebraic degree 

It is well known that the maximum degree of a bent function on n variables is § (for even n) |13 and the 
maximum degree of a negabent function on n variables is [5] (for any integer n) 0. But, so far all the known 
general constructions of bent-negabent functions on n variables produce functions with algebraic degrees less than 
or equal to j + 1, where n is any positive integer divisible by 4 (see 0, Q, JH). 

Throughout this section, let n = 2m be any even integer greater than or equal to 4, and h be a quadratic bent 
fucntion defined as h(x) = ®™ l XiX m+ i for all x = {x\,--- ,x n ) G F^. It is known that any quadratic bent 
function of n variables is equivalent to h(x) O. Since o"2(x) is a quadratic bent function |[T0l , then there exist 
A G GL(n, F 2 ), b, u G Fg, and e G F 2 such that 



a 2 (x) = h(xA b) u ■ x 



c 



(13) 



In the sequel, we always assume that 02 (x) is of the above form as (fl~3l . 
In Q, Stanica et al. provided a strategy to construct bent-negabent functions. 
Lemma 3: (Q) Suppose that both / G B n and / © h are bent functions. Then /' G B n defined by 

f(x) = f(xA®b)®a 2 (x), xGFo 1 , 

is a bent-negabent function. 

Let / G B n be a Boolean function of the form 



f(x,y)=x-ir(y)®g(y), x,y <EW 



2 - 



(14) 



where " • " denotes the inner product in F™, vr : F^ -> F™, and g : F™ -> F 2 . Then the function / is bent if and 
only if 7r is a permutation. The whole set of such bent functions forms the well-known Maiorana-McFarland class. 
It is shown in Q that the degree of a Maiorana-McFarland-type bent-negabent functions on n variables is at most 



^ — 1 for n > 



For every positive integer m, the vector space F™ can be endowed with the structure of the finite field F 2 ™ . Any 
permutation on F™ can be identified with a permutation of F 2 ™ . A polynomial F{X) over F 2 ™ is called a complete 



1 1 



mapping polynomial if both F(X) and F(X) + X are permutation polynomials of ¥ 2 m. Combining the above 
Lemma [3] and complete mapping polynomials over F2™, Stanica et al. gave a method to construct bent-negabent 
functions from Maiorana-McFarland bent functions = ttf{x\, • • • , x m ) • (x m+ i, • • • , x n ), where 7Tf denotes 

the permutation on F™ induced by a complete mapping polynomial F(X) G F2"[X]. However, the degrees of 
the bent-negabent functions they constructed are equal to deg(7rp) + 1, and there are only few known results on 
the complete mapping polynomials with high degrees over F2"». They could prove that there exist bent-negabent 
functions on n = 121 variables with algebraic degree j + 1 = 31 + 1, since there exist complete mapping polynomials 
on F 2 ™ of degrees 3/, where m = 61 and I > 2 (see Q, ifTTI ). 

In fact, if tt : F™ — > F™ is a mapping such that n(y) and 7r(y) © y are permutations, from Maiorana-McFarland 
bent functions we can construct infinite class of bent-negabent functions on n variables of degree ranging from 2 
to ^. More precisely, we get the following results: 

1) We calculate the concrete value of A in equality ( fT3l ); 

2) We show that there exists mapping tt : F™ — > F™ such that n(y) and ir(y) © y are permutations and give 
two methods to get these mappings for any m > 2; 

3) Using the linear transform A and such mapping tt, we get bent-negabent functions on n variables of degree 
arranging from 2 to ^ for any even n > 4. Note that the maximum degree of our bent-negabent functions 
on n variables is equal to |. Thus, we answer the Open Problems 1 and 2. 

A. The concrete values of A, b, u and e 

By transforming the quadratic form 02 into its canonical form, we can obtain that the concrete values of A = 
(aij)nxn G GL(n,¥ 2 ), u = (ui,u 2 , ■ ■ ■ ,u n ), b = (pi, b 2 , ■ • • , b n ) G W%, and e G F 2 in equality ([13]) are 

(1) an = 1 if 1 < i < n, a>ij = ai tTn +j = a m+ ij = a m +i tm +j = lif2<i<m and 1 < j < i — 1, and = 
otherwise; 

(2) u = n ; 

(3) &2i = b m +2i = 1 if 1 < i < an d bj = otherwise; 

(4) e = 1 if m = 2, 3 (mod 4), and e = if m = 0, 1 (mod 4). 
Define matrix S m = (sij) mxrn over F2 by 

J 1, if 2 < i < m, 1 < j < i - 1; 
[ 0, otherwise. 

Then, the n x n matrix A can be written as 

( S m © I m S m \ 

and A^ 1 = A. 

B. The existence of mapping tt 

In this subsection, we first explain that there exists mapping tt : F™ — > F™ such that 7r(y) and 7r(y) © y are 
permutations for any m > 2 from the perspective of the complete mapping polynomial over finite field W$m. And 
then introduce two methods to obtain the mapping tt directly from the vector space F™. 
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If a(x) is a complete mapping polynomial over ¥2^, then the corresponding permutation a'(x) on F™ satisfies 
a'(x) and cr'(x) © x are both permutations. Trivial examples of complete mapping polynomials are the linear 
polynomials a(x) = ax with a 7^ 0, —1. If m > 3, there exist complete mapping polynomials of F2™ of reduced 



degree > 1. For details on complete mapping polynomials we refer to 111211 . Thus, there exists mapping it : F™ — > F™ 
such that both ir(y) and 7r(y) © y are permutations for any m > 2. 

In what follows, we introduce two methods to obtain the linear permutation it : F™ — > F™ such that ir(y)®y is also 
permutation for any m > 2. Define the mapping it : F™ -> F™ as ir(y) = yM, where y = j/2, • • • , Um) £ F™. 
If we can find m x m matrix M over F2 such that M and M © I m have full rank m, then we get the desired 
linear permutation it. 

If m = 2, there are two matrices satisfy the conditions: 

(::)-(::) 

Using exhaustive computer search, we found that there are 48 matrices satisfying the conditions for m = 3, and 
5824 matrices satisfying the conditions for m = 4. For example, 



/ 





1 


1) 




( 


1 


1 


l\ 




1 


1 





3 







1 


1 


V 


1 





°J 




\ 


1 








and 



( 


1 





1 \ 




/ 


1 





1 


1 \ 


1 





1 












1 


1 








1 












1 


1 








1 1 








) 






1 








) 



Method 1. For any even m > 4, Parker and Pott gave a method to construct m x m symmetric matrix M over 
F2 such that M and M © I m have rank m in Section 3 of O. To save space, here we will not give the detail. 

Method 2. An mx m block matrix P is said to be block diagonal matrix if it has main diagonal blocks square 
matrices such that the off-diagonal blocks are zero matrices, i.e., P has the form 



/ 



P 



Pi 






P-2 



' 




■+kt = m. It can be indicated as diag(Pi , P2, ■ ■ ■ , Pt). 



\ •• 

where Pj, 1 < j ' < t, is a square matrix of order kj, and k±+- 
Any square matrix can trivially be considered a block diagonal matrix with only one block. 
For the determinant of block diagonal matrix P, the following property holds 

t 

det(P) = JJdet(Pi). 

i=l 

By this property of diagonal matrix, we can easily get the following recursive construction. 

Lemma 4: Let t > 2 and Mj be a square matrix of order kj such that Mj and Mj © 1^. have full rank for any 
1 < j < t. If fei H h k t = m, then the matrix M = diag(Mi, M 2 , • • • , M t ) and M © I m have rank m. 



13 



As mentioned before, for m = 2, 3, there exists matrix M such that both M and M © I m have full rank. Thus, 
for any m > 2, we can get matrix M such that M and M © I m have full rank by Lemma |4] Therefore, the linear 
permutation 7r(y) = yM has been obtained. 

C. Construction for infinite class of bent-negabent functions 
If / G £> n is a bent function, then the function given by 

f(x-C®a)®(3-x®(, where C G GL(n,¥ 2 ), a,(3 G F£, £ G F 2 , (15) 

is also bent. All the functions in ( fT5l ) is called a complete class. Specifically, it is said to be Maiorana-McFarland 
complete class if / belongs to Maiorana-McFarland class in (fT4l ). 

Counterexamples show that these operations generally do not preserve the negabent property of a Boolean 
function. Indeed if GL(n,¥2) is replaced by 0(n, F 2 ), the orthogonal group of n x n matrices over F2, the 
negabent property is still preserved. 

Lemma 5: (0) Let /, g : W% — >■ F2 be two Boolean functions. Suppose that / and g are related by g(x) = 
f(x ■ O © q) © j3 ■ x © (, where O is an n x n orthogonal matrix over F2, a, /3 G F?), and £ G F 2 . Then, if / is 
bent-negabent, g is also bent-negabent. 

Now, we are ready to construct 2?n-variable bent-negabent functions of degree ranging from 2 to m. 

Theorem 5: Define / G B n by 

f(x,y) = x-ic(y)®g(y), x,y G F™, 
where 7r : F™ -> F^ is a mapping such that 7r(y) and ir(y) © y are permutations and g G £> m . Then 

f'(x,y)=f((x,y)-OA®a)®P-x®( (16) 

is a bent-negabent function with deg(/') = deg(/), for any a, /3 G Fjj, C G ^2> and any n x n orthogonal matrix 
O over F2. 

Proof: If n(y) and 7r(y) © y are permutations on F™, we have that /(x, y) and /(x, y) © h(x, y) = f{x,y)@x-y 
are both Maiorana-McFarland bent functions. It follows from Lemma [3] and Corollary [Qthat f({x, y) • A © b) is a 
bent-negabent function. Applying Lemma [5] to f((x,y) - A ©6), we have that f((x,y) ■ OA © a) © /3 • x © £ is also 
a bent-negabent function for any a, /3 G Fg, C G F 2 , and any n x n orthogonal matrix O over F 2 . 

Since the algebraic degree is an affine invariant, we have deg(/') = deg(/). □ 
Note that we are free to choose g. Specifically if taking g G B m with deg(y) = m, one has deg(/') = deg(/) = m. 
It is well known that the maximum degree of bent function in 2m variables is m. Then, the maximum degree of 
bent-negabent function in 2m variables is less than or equal to m. Our construction can reach the maximal degree, 
so the bound is tight. Therefore, the following result holds. 

Corollary 2: Let n be even and / G B n . If / is bent-negabent, then the algebraic degree of / is at most ^. 
And the bent-negabent function /' given by (f76l ) can achieve the maximal algebraic degree if deg(y) = m or 
deg(-7r) = m — 1. 

Remark 1: Since the degree of a Maiorana-McFarland-type bent-negabent function on n variables is at most 
S — 1 for n > 8 (see Q), the functions constructed by Theorem [5] may not in the Maiorana-McFarland class, but 
belong to the Maiorana-McFarland complete class. 
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The dual also preserve the bent-negabent function property. 

Lemma 6: (flU) If / is a bent-negabent function, then its dual is again bent-negabent. 

Lemma 7: (0) The algebraic degrees of any n-variable bent function / and of its dual / satisfy: 

2 £ d eg(/)-l ■ 

It follows from Lemma [7] that the degree of /, deg(/), is also equal to ^ if / is an n-variable bent function 
with deg(/) = Combining Lemma [6] and Lemma |7J we have the following corollary. 

Corollary 3: Let p(x) G B n be a bent-negabent function with degree m obtained from Theorem [5] Then its dual 
is again bent-negabent with degree m. 

D. Examples of n-variable bent-negabent functions with maximum degree for n = 8 and n = 10 

Example 1: Take m = 4, n = 2m = 8, ir(y) = yM with matrix 

/ 1 1 \ 
10 10 

M = 

10 
V 1 / 

and g(y) = y\y 2 y 3 y A in Theorem [5] It is easy to check that matrices M and M ffi 7 4 have rank 4. Then 

7r(y) = yM = (y 2 ffi 2/4, 2/1 ffi 2/3, 2/2, 2/l), 

and 

f(x, y) = x ■ ir(y) © g(y) = x 1 • (y 2 © y±) © x 2 ■ (yi © 2/3) © x 3 • 2/2 © x 4 • 2/1 © 2/12/22/32/4- 
The linear transformation matrix A is equal to 

/ \ 



.4 



5*4 ffi I 4. S4. 



Si 



, where 54 



10 
110 

\ 1 1 1 ) 

Let O = I n , a = [3 = n and ( = 0. Then the function f'(x, y) = /((x, y)A) = x 2 x 3 x 4 y 4 ffix 2 x 3 y 3 y4ffix 2 x 4 ?/ 2 ?/4( 
^22/22/32/4 © ^3^42/12/4 © x 3 2/i2/32/4 © x 4 2/i2/22/4 ffi 2/12/22/32/4 ffi x 2 x 3 y 4 ffi x 2 x 4 t/ 4 ffi X22/22/4 ffi ^22/32/4 ffi X3X47/4 ffi x 3 yiy 4 ( 

^32/32/4 ffi ^42/12/4 ffi ^42/22/4 ffi 2/12/22/4 ffi 2/12/32/4 ffi 2/22/32/4 ffi XiX 3 ffi X1X4 ffi Xiy 2 ffi XiJ/3 ffi X 2 X 3 ffi X 2 X 4 ffi X22/1 e 

^32/1 ffi ^32/4 ffi x 4 2/2 ffi x 4 2/4 ffi 2/12/3 © 2/22/3 © 2/32/4 ffi x 2 ffi x 3 ffi x 4 ffi y 2 ffi y 3 is bent-negabent and deg(/') = 4. 
Example 2: Take m = 5, n = 2m = 10, 7r(y) = j/M with matrix 

(0 1 l\ 

where Mi = I " " ] , and M 2 = 





1 1 
1 



and g(y) = yiy 2 y 3 yiy^ ffi 2/22/32/42/5- It i s eas Y to check that matrices M and M (B h nave ran k 5. Then 

ir(y) = yM = (y x ffiy 2 , yi, 2/4 ffi 2/5, 2/3 © 2/4, 2/3), 

and 

/(x, 2/) = x • 7r(y) ffi 5(2/) = xi(yi ffi y 2 ) ffi x 2 yi ffi x 3 (y 4 ffi j/ 5 ) ffi x A (y 3 ffi iy 4 ) ffi x 5 y 3 ffi y\y 2 y 3 y^ ffi 2/22/32/42/5- 
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The linear transformation matrix A is equal to 

o\ 



o . 



°/ 

Therefore, the function f'(x,y) = f((x,y)A) = {x2@yi){x 3 x i x^®x 3 x i y i y^®x 3 x 5 y 3 y^®x 3 y 3 y i y^®x A x^y2y- ) ® 
^42/22/42/5 © ^52/22/32/5 © 2/22/32/42/5 © x 3 x 4 y 5 © x 3 x 5 y 5 © x 3 y 3 y 5 © x 3 2/42/5 © x 4 x 5 y 5 © x 4 y 2 2/5 © ^42/42/5 © ^52/22/5 © 
^52/32/5 © 2/22/32/5 © 2/22/42/5 © 2/32/42/5 © £32/5 © ^42/5 © ^52/5 © 2/22/5 © 2/32/5 © 2/42/5) © £1^2 © x\y\ © x 2 x 3 © X 2 X 4 © 
X2X5 © X22/3 © ^22/4 © X3X5 © x 3 y 2 © x 3 2/ 4 © x 4 x 5 © x 4 y 2 © X4_y 3 © x 4 y 4 © x 4 y 5 © x 5 y 2 © x 5 y 4 © yiy 2 © 2/12/5 © 
2/22/3 © 2/22/4 © 2/22/5 © 2/32/5 © 2/42/5 © x 3 © x 5 © 2/5 is bent-negabent and deg(/') = 5. 
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